Kishan Lal Choudhary qdPM 9.1 - 'cfg[app_app_name]' Persistent Cross-Site Scripting
webapps php

Kishan Lal Choudhary Victor CMS 1.0 - 'cat_id' SQL Injection
webapps php

Kishan Lal Choudhary Victor CMS 1.0 - 'comment_author' Persistent Cross-Site Scripting
webapps php

Cody Winkler HP LinuxKI 6.01 - Remote Command Injection
remote multiple CVE-2020-7209

BKpatron Online Healthcare management system 1.0 - Authentication Bypass
webapps php

Daniel Monzón Online Healthcare Patient Record Management System 1.0 - Authentication Bypass
webapps php

BKpatron online Chatting System 1.0 - 'id' SQL Injection
webapps php

Kishan Lal Choudhary Monstra CMS 3.0.4 - Authenticated Arbitrary File Upload
webapps php

Daniel Ortiz forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting
webapps php

Walid Faour Oracle Hospitality RES 3700 5.7 - Remote Code Execution
webapps java CVE-2019-3025

BKpatron Online Examination System 1.0 - 'eid' SQL Injection
webapps php

Nguyen Khang WordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
webapps php

jul10l1r4 Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection
webapps hardware CVE-2020-13118

Felipe Molina ManageEngine Service Desk 10.0 - Cross-Site Scripting
webapps java CVE-2019-15083

Photubias vBulletin 5.6.1 - 'nodeId' SQL Injection
webapps php

SunCSR E-Commerce System 1.0 - Unauthenticated Remote Code Execution
webapps php